Securing AI Agents [at Uber]: Lessons from Real-World Deployment